Phusion旅客安全检查更新保持连接

Question

我正在使用phusion乘客版本5.1，每天都会进行安全更新检查，检查是否保存了附加日志的连接，以供参考。安全check.IF的用途是什么?我禁用它是解决问题，还是运行乘客命令？

[ N 2020-02-24 06:31:06.4719 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 5035, application /var/lib/raj/
App 30989 stdout: 
App 30989 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 30989 stderr: 
App 30989 stderr:      This library provides various optimized routines that make
App 30989 stderr: 
App 30989 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 30989 stderr: 
App 30989 stderr:      so that Phusion Passenger can compile one on the next run.
App 30989 stderr: 
App 30989 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 30989 stderr: 
App 30989 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 30989 stderr: 
App 30989 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 30989 stderr:      Trying next mirror...
App 30989 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 30989 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 30989 stderr:   --> Passenger will still operate normally.
App 31075 stdout: 
[ N 2020-02-24 06:54:21.2705 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 31075, application /var/lib/raj/rails-srv/releases/initial_release/rails-srv (production)
[ E 2020-02-24 07:19:32.7365 13587/T5 age/Cor/SecurityUpdateChecker.h:505 ]: Security update check failed: Couldn't connect to server for https://securitycheck.phusionpassenger.com/v1/check.json (if this error persists check your connection security or try upgrading Passenger) (next check in 24 hours)
App 396 stdout: 
App 396 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 396 stderr: 
App 396 stderr:      This library provides various optimized routines that make
App 396 stderr: 
App 396 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 396 stderr: 
App 396 stderr:      so that Phusion Passenger can compile one on the next run.
App 396 stderr: 
App 396 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 396 stderr: 
App 396 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 396 stderr: 
App 396 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 396 stderr:      Trying next mirror...
App 396 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 396 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 396 stderr:   --> Passenger will still operate normally.
App 466 stdout: 
[ N 2020-02-24 07:36:28.1279 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 466, application /var/lib/raj/rails-srv/releases/initial_release/rails-srv (production)
App 19802 stdout: 
App 19802 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 19802 stderr: 
App 19802 stderr:      This library provides various optimized routines that make
App 19802 stderr: 
App 19802 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 19802 stderr: 
App 19802 stderr:      so that Phusion Passenger can compile one on the next run.
App 19802 stderr: 
App 19802 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 19802 stderr: 
App 19802 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 19802 stderr: 
App 19802 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 19802 stderr:      Trying next mirror...
App 19802 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!

Answer 1

在客运5.1.0中引入的安全检查试图连接到securitycheck.phusionpassenger.com，以查看是否存在新版本的乘客(包括安全更新)。

这可以通过将乘客配置变量PassengerDisableSecurityUpdateCheck设置为on 请看这里来禁用，在此之后需要重新启动web服务器。

即使设置了该标志，在重新启动后的第一个客户端请求上，也会进行下载和构建尝试。我发现在专用网络(没有互联网接入)中，这可以阻止apache大约20秒。但是，可以通过webserver配置中的环境标志成功地禁用这两个步骤，如文章中的日志消息所示。对于apache来说，这对我来说是有效的：

<VirtualHost *:443>
   PassengerDisableSecurityUpdateCheck on
   SetEnv PASSENGER_COMPILE_NATIVE_SUPPORT_BINARY 0
   SetEnv PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY 0
...

在重新启动web服务器之后，日志现在显示：

App 23626 stdout: 
App 23626 stderr:  [passenger_native_support.so] not compiling because PASSENGER_COMPILE_NATIVE_SUPPORT_BINARY=0
App 23626 stderr:  [passenger_native_support.so] not downloading because PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0
App 23626 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 23626 stderr:   --> Passenger will still operate normally.

。。在重新启动之后，客户端与服务器的连接立即响应.